<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <title>foo</title>
    <!-- can't be inline, because of CSP -->
    <script src="foo.js"></script>
  </head>
</html>
